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AN EXPLICIT CONSTRUCTION OF THE JACOBIAN OF A 
NONSINGULAR CURVE AND ITS GROUP LAW 

TAL PERM 



Abstract. This paper is devoted to constructing an explicit efficient repre- 
sentation for the Jacobian variety of a nonsingular curve of genus greater than 
1, and its group law. 

We start by introducing some theoretic background for the theme in issue, 
based on a paper of G.W.Anderson. 

Following this theory we describe an algorithm for executing the group law on 
the Jacobian elements, consisting of several steps. 

Finally we exhibit two examples. The first example exhibits an explicit for- 
mulation for the Jacobian of a well known non singular elliptic curve of genus 
1, that is, the Weierstrass curve. The second example introduces an explicit 
computation of the group law for a non singular curve of genus 3, 

C : u>2 = wi(u>i — Wo))(wi — 2ojo)(wi — 3u>o) 

where u>o,Ui,u>2 are homogeneous coordinates of the projective plane P 2 . 
These examples are highly detailed for the convenience of the reader. 



INTRODUCTION 

This paper is devoted to constructing an explicit efficient representation for the 
Jacobian variety of a nonsingular curve of genus greater than 1, and its group law. 
The construction of the representation for the Jacobian variety exhibited in sec- 
tions one to three is mainly taken from Anderson's paper [?], where in Lemma 10 
we decompose the process into well organized steps to be computed, thus giving it 
an algorithmic structure . The example introduced in the fifth section follows these 
exact steps to reach the desired result. 

The first example given in section four appears partly in Anderson's paper. Our 
approach here is different and much more detailed. The second example (and the 
most interesting one) is new. 

The construction includes three stages. The first is a construction of a matrix rep- 
resentation for the equivalence classes of divisors, where each divisor class defines 
a special class of matrices, referred to as a G — form, representing it uniquely. 
There is a bijective correspondence between the divisor classes and the G — form 
classes. The second construction is that of the Jacobian's group law implemented 
on these G — forms classes. The third construction is that of the Abel map which 
maps G — form classes bijectively to a set of proportionality classes of special kind 
of matrices named Jacobi matrices. The set of Jacobi matrices forms a projective 
algebraic variety. 
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By constraints of the extent of this paper, we decide to leave the construction of 
the inverse Abel map out of the scope of this paper. 
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PRELIMINARIES 

Throughout this paper, unless mentioned otherwise, we take : 

• k an algebraically closed field. 

• n an integer > 2. 

• A a finitely generated fc-algebra without zero divisors. 

• L C A a, finite dimensional fc-subspace. 

• k- algebras are taken to be commutative with unit, where elements of k are often 
referred to as scalars or constants. 

THE ABELIANT AND THE DISCRIMINANT 

Definition 1. Let {X^}] 1 ^ be a family of n by n matrices with entries in a ring 
R and let {sj}"=i u {*j}j=i be a family of independent variables. 

The abeliant ,dcnoted by abel(X°, ...,X n+1 ) or abel^X®, is defined to be an 
n by n matrix the entry of which in position ij is the coefficient with which the 
monomial 

S i ' Ila=l Sa ' Y\b=l — S\ ■ ■ ■ Si ■ ■ ■ S n t\ • • • tj • • • t n 

appears in the expansion of the expression 

trace(XW(^ =1 t b XW)*X^\j: n a=1 s a XWr) 

as an i?-linear combination of monomials in the s's and the t's. 

The discriminant A(X\ X n+1 ) (also denoted by Afj" 1 1 lW) i f the given 
family of matrices is defined to be 

n n 

i£* (o i 2 "- 2 -ni e x(i) \ 2 

i=i »=i ;e{i,...,™+i}\{i} 

Various properties of these operators can be found in Anderson's paper [?] . 

SEGRE MATRICES AND JACOBI MATRICES 

Let X and Y be matrices with entries in a fc-algebra R. 
Definitions 1. 

• X is said to be k-general if there exist a row of X and a column of X each of 
which consists of k-linearly independent entries. 

• X and Y are said to be k-equivalent if there exist square matrices $ and \& with 
entries in k such that |$| ^ , |*| ^ such that Y = 

• Let x and y be vectors in a common vector space over k, x is said to be 
k-proportional to y if there exists a nonzero scalar c & k such that ir = cy. 

Definition 2. Recalling the notations introduced in the Preliminaries, a Segre 
matrix X is an n by n matrix with entries in L, such that X is k-general and 
rank{X) < 1 . 

We say X is of type (k, n, A, L) 
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Properties 1. 

• Let X be a Segre matrix, then any matrix with entries in A to which X is 
k-equivalent is a Segre matrix. 

• The transpose X T is a Segre matrix. 

• There exists a factorization X = uv where u (resp. v) is a column (resp. row) 
vector with entries in the fraction field of A. 

• Given any such factorization X — uv ,the entries of u (resp. u)are k-linearly 
independent. 

• Given any two such factorizations X = uv = u'v', there exists unique nonzero / 
in the fraction field of A such that u' — fu and v' = f~ 1 v. 

An ad hoc tensor formalism. 

Let A® 1 be a tensor product over k of copies of A indexed by Z then A® F is a 
k-algebra A® z which is generated by symbols of the form 

® ieZ (a» G A, Oi = 1 for \i\ > 0) 

subject to the obvious relations of tensor algebra, under the multiplication rule 
induced by componentwise multiplication in A 

where for i e Z, ^,6; e A 
Put 

aW = ®* - { 1 otherwise. f ° r aU a G A and ? G Z ' 

For the universal property of A® 7 * see [?] and [?] . 

Definition 3. Given a matrix X with entries in A and I e Z define l' 1 ' to be a 
matrix with entries in A® z such that 

= (*«) (0 - 

For any subset / C Z let A® 1 denote the k-subalgebra of A® z generated by all 
elements of the form where a £ A and / e /, moreover it is a universal commu- 
tative k-algebra with unit (i.c has a universal property). If 7 is a finite subset of 
Z, then we can identify the k-algebra A® 1 with the usual tensor product over k of 
copies of A indexed by I. 

Note that by making the identifications = a for all a € A we equip 
with the structure of an A-algcbra. 

Remark 1. A well known fact is that the k — algebra A® 1 has no zero divisors. 

Definition 4. A Jacobi matrix Z is an object admitting the following properties 

(f) Z is an n by n matrix with entries in A®^' "' n+1 ^. 

(2) Z^0. 

(3) Z 12 G fc-span oiL ■ L« • ■ (L^) 2 • • • (/>)) 2 • 

(4) Zu = [1h 2],Zi 2 . 

(5) 7r*Zij = Z n i t7V j for any bijective derangement 7r supported in {1, n}. 
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(6) 



0. 



Z\\ Z\2 
^21 Z22 

(7) abel^dO 1 ► -l]*Z) = A • Z. 
where A = (2|n + l).(0|l)*Zn 



ii).^ii-(o|2)»z22-nr=3« o iMi) 



We call A the discriminant of the Jacobi matrix Z. If we need to draw atten- 
tion to the basic data we say that Z is of type (k, n, A, L). 



THE ABSTRACT ABEL MAP 

Definition 5. Let Y be an n by n matrix. The abstract Abel map is defined to 
be 

Abel : Y ^ abel^Y {l) 
The abstract Abel map by definition sends each Segre matrix X to the n by 
n matrix abel^X® with entries in ^®{o,...,n+i}_ 

Proposition 1 ("The abstract Abel theorem"). Let X and X 1 be Segre matrices 
with images Z and Z' under the abstract Abel map, respectively. Then X' is k — 
equivalent to X if and only if Z' is k — proportional to Z. 

Theorem 2. 

1. The set of k — proportionality classes of Jacobi — matrices forms a projective 
variety. 

2. The abstract Abel map takes values in the set of Jacobi matrices. 

3. The abstract Abel map puts the k — equivalence classes of Segre matrices into 
bijective correspondence with the k— proportionality classes of Jacobi— matrices . 

G-FORMS 

Definition 6. Let G be a divisor such that 

degG = 0mod2 , ^degG > 2g 
and put n — ^degG — g + 1. 

A G-form X is an object admitting the following properties: 

(1) X is an n by n matrix with entries in C{G). 

(2) All two by two minors of X are zero. 

(3) There exists in X some row and some column with k — linearly independent 
entries. 

A G-form is the same thing as a Segre matrix of type {k, n, ®^ =0 £(mG), £(G)) 

Proposition 3. Construction of a divisor represented by a given G-form. 

Let G be a divisor such that degG = 0mod2 , ^degG > 2g and n — ^degG — g + 1. 
Let X be a G — form, choose a column u and a row v of X with k — linearly 
independent entries. Let f be the entry common to u and v; then f does not vanish 
identically. Consider the effective divisors 

D = G + minj(divvj), E = G + min i (divu i ) , F = G + divf. 

Our claim is that X represents the divisor D. 
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Proposition 4. Representation of divisors of degree \degG by G-forms. 
Let G be a divisor such that degG = 0mod2 , jdegG > 2g and n — \degG — g + 1. 
Let D be a divisor of degree ^degG. Let u be a column vector with entries forming 
a k — basis for C(D) and let v be a row vector with entries forming a k — basis for 
C(G-D). PutX = uv. 

1. X is a G-form. 

2. The k — equivalence class of X depends only on D, not on the choice of vectors 
u and v. 

Definition 7. In the above situation we say that the G — form X represents the 
divisor D of degree \degG. 

Proposition 5. Let G be a divisor of even degree such that \degG > 2g. 
There exists a unique bijective correspondence 

{ k-equivalence classes of G-forms } <-> { divisor classes of degree ^degG } . 

with respect to which, for any G — form X and for any divisor D of degree \degG, 
the k — equivalence class of X corresponds to the divisor class of D if and only if 
X represents D. 

Matrix representation of divisor class addition and subtraction. 

Definition 8. Kronecker products. Given a p by q matrix A and an r by s 
matrix B both with entries in some ring R, the Kronecker product A o B is defined 
to be the pr by qs matrix with entries in R admitting a decomposition into r by s 
blocks of the form 



AoB = 



AijB 



Remark 2. The Kronecker product of matrices is compatible with the ordinary 
matrix multiplication in the sense that 

(A o B)(X oY)= (AX) o (BY) 

whenever AX and BY are defined. 

Proposition 6. Let divisors G,G\D and D' be given subject to the following 
conditions: 

degG = 2 • degD, degG' = 2 • degD' 
miniy jdegG^degG 1 ) > 2g, max ( \degG,\degG' ) >2g + l. 

Put n = \degG — g + 1, n' = \degG' — g + 1, 

and n" = \(degG + degG') — g + l= n + n' + g— 1. 

Fix a G — form X representing D and a G' — form X' representing D' . Let P and 
Q be any nn' by nn' permutation matrices and consider the block decomposition 

a b 



P(XoX')Q = 



c d 



where the block d is n" by n" and the other blocks are of the appropriate sizes. 

1. For some P and Q the corresponding block d is k — general. 

2. For any P and Q such that d is k — general, d is a (G + G') — form representing 
D + D'. 
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Lemma 7. Let E be a nonzero effective divisor. Let TZe be the ring consisting of the 
meromorphic functions on C regular in a neighborhood of the support of E and let 
Ie C TZe be the ideal consisting of functions vanishing to the order at least E(i.e. 
functions which have zeroes at each point of the support of E, with multiplicities 
greater or equal to the order of E there). Then there exists a k — linear functional 

a : TZe — ♦ k 

factoring through the quotient TZe/^e such that the induced k — bilinear map 

((amodJE,bmodXE i— > cr(ab)) : TZe/Ie x TZe/1e — > k 
is a perfect pairing of {deg E) -dimensional vector spaces over k. 
Lemma 8. Let G and E be divisors such that 

degG = 0mod2, E > 0, ^degG - degE > 2g - 2. 

There exists a k — linear functional 

p : C{G) -> k 

factoring through the quotient gTgzj^ such that for all divisors D of degree ^degG 
the induced k — bilinear map 

((a + C(D-E),b + C(G-D- E)) „ P (ab)) : x ^|g^ - * 

is a perfect pairing of {degE) -dimensional vector spaces over k. 



In the situation of Lemma we call p : C(G) \— > k an E — compressionfunctional. 
Proposition 9. Let G and E be divisors such that 



and put 



degG = 0mod2, E > 0, -degG - degE > 2g 



n = —degG — degE — g + 1, n' = —degG — g + 1 = n + degE 



Let p : C(G) — > k be an E-compression functional. Let D be a divisor of degree 
^degG and let X be a G — form representing D. Let P and Q be any n' by n' 
permutation matrices and consider the block decomposition 



PXQ 



where the block a is degE by degE, the block d is n by n and the other blocks are 
of the appropriate sizes. 

1 . For some P and Q we have \pa\ 7^ 0. 

2 . For any P and Q such that \pa\ ^ the matrix z defined by the rule 



W X 




y z_ 





1 



-(pc)(pa) 





a 


b 






c 


d 





-(pa) -\pb) 
1 



is a (G — 2E) — form representing D — E. 
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Candidates for the Jacobian and for the Abel map 

0. 1. Candidate for the Jacobian. 

Fix an effective divisor E of degree > 2g + 1 and put 

oo 

A = £{2mE), n = 1(E) = degE - g + 1, L = C(2E). 

rn—O 

The projective algebraic variety J of k —proportionality classes of Jacobi— matrices 
of type (k, n, A, L) is our candidate for the Jacobian of C. 

Candidate for the Abel map. 

For each divisor D of degree zero fix a 2E — form Xd representing D + E. Now a 
2E — form is the same thing as a Segre matrix of type (k, n, A, L). By Proposition 
it follows that the map D i— ► X& puts the divisor classes of degree zero in 
bijective correspondence with the k — equivalence classes of Segre matrices of type 
(k,n, A, L). For each divisor D of degree zero let Zd be the image of Xd under 
the abstract Abel map. By Theorem it follows that the map D i— > Zd puts the 
classes of divisors of degree zero into bijective correspondence with the points of J. 
The bijective map from classes of divisors of degree zero to J induced by the map 
D i— ► Zr> is our candidate for the Abel map. 

Lemma 10. Fix an E — compression functional p(^E) — » k. Fix Segre matrices 
X and X 1 of type (k,n, A, L). Fix a divisor D (resp. D' ) such that X (resp. X' ) 
is k — equivalent to Xd (resp. Xrj> )■ Let P and Q be any n 2 by n 2 permutation 
matrices and consider the block decomposition 

• • • 

• a b 

• c d 

where the block a is of size degE by degE, the block d is of size n by n and the 
other blocks are of the appropriate sizes. Here the bullets hold places for blocks the 
contents of which do not concern us. Further, consider the block- decomposed matrix 

\pa\ -(pa)*(pb)~ 

\pa\ 

1. For some P and Q the corresponding block z is k — general. 

2. For any P and Q such that the corresponding block z is k — general, z is a 
Segre matrix of type (k, n, A, L) and moreover z is k — equivalent to Xry+w 

Proof. Since X (resp. X') is A: — equivalent to Xjj (resp. Xd>) they differ only by 
the k - basis elements of C(E + D),£(2E - (E + D)) (resp. C(E + D'), C{2E - 
(E + D'))), thus we may consider A^and Xd>- 

We hereby list some facts to make the context of the proof more vivid : 

A. Xd is a 2E — form representing E + D. 

B. X D is of size t(E + D) = deg(E + D) - g + 1 = degE + degD - g + 1 = 
degE — g + 1 = n. 

C. Xd o Xd> = udvd ° ud>vd> = (ud ° ud')(vd ° V D') where ud (resp. vd) 
is a column (resp. row) vector with entries forming a k — basis for C(E + D) 
(resp. C(2E — (E + D)) = C(E — D)) and so is ud> (resp. vd>) replacing D by 
D'. ud o ud> is an n 2 column vector with entries fc-spanning C((E + D) + (E + 



P(XoX')Q = 



W X 




y z 


= \pa\ ■ 



\pa\ 
-(pc)(pa)* | pa | 



6 
d 
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D')) = C(2E + D + D'), vd ° vd' is an n 2 row vector with entries fc-spanning 
C((2E-(E+D)) + (2E-(E+D))) = C(4E- (2E + D + D')) = C(2E — {D + D')). 

D. By © we can choose permutation matrices Pi and Q\ such that the above 
matrix multiplication gives us a 4E — form representing [E + D) + (E + D') in the 
right-bottom £{2E + D + D') by £(2E - (D + D')) block, where £{2E + D + D') = 
£(2E -(D + D')) = deg2E -g + l = degE + n. 

E. Using the E — compression functional p(4P) — > k on that right-bottom block 
we decompose the C((E + D) + (E + D')) k — basis to a k — basis of C c(e+d+D') 
and a k — basis of C(E + D + D'), and the L(2E — (D + D 1 )) k — basis to a k — basis 
of C C(e-(£+d>)) and a fc - basis of C(E - (D + D')) . 

F. Following Proposition [51 one more time we use a permutation matrices P 2 and 
Q2 to bring the k — basis of C c(e+d+D') ^° ^ nc nrs ^ degE elements of the 
corresponding column vector (which is in fact the column vector formed by the last 
degE + n entries of Pi(ud o ud>)) and to bring the k — basis of C c(e-(d+d')) ^° 
the first left degE elements of the corresponding row vector (which is in fact the 
row vector formed by the last degE + n entries of (vd vd>)Qi)- Thus we have at 
the left bottom n by n block, d,of the referred matrix a 2E — form representing 
E + D + D' 

In view of the above observations by taking P — P2P1 and 
Q = Q1Q2 as permutation matrices we have that 

a b 
c d 

is a AE — form representing 2E + D + D' . 
\pa\ ^ 0. 

z is a 2E-form representing E + D + D 1 . 
A fortiori z is k — general. 



2. By applying p to both sides of the above equation we get that 

\pw\ = \pa\ 3 pa, px = 0, py = 0. 

If I pa I — we immediately have the right hand side of the equation vanishing, thus 
we get that the matrix on the left is a zero matrix particularly z which contradicts 
its k — generality so we have \pa\ ^ and hence \pw\ ^ 0. 

By hypothesis, since X and X' are Segre matrices we have a factorization X oX' = 
uv o u'v 1 — (u o u')(v o 11') .Since X and X' are k — equivalent to Xjj and Xd> this 
above factorization has the form 



w 


X 




V 


y 


z 







where the entries of the column vector (resp. row vector) on the right belong to 
£{2E+D + D') (resp. C(2E -D-D')), the blocks p and r are vectors of length degE 
and the blocks q and s are vectors of length n. By the definition of P-compression 
functional (Lemma[!3) it follows that the entries of p (resp. r) project to a k — basis 

of the quotient ^e+d+D') ( res P- c(2E^(e+d^+D')) ) s i nce otherwise we would have 
had a zero row in p(pr) = pa contradicting the fact that \pa\ does not vanish. Also 
by the definition of the P-compression functional it follows that the entries of q 
(resp. s) belong to C(E + D + D') (resp. C(2E - (E + D + D'))). Finally, since 
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z = qs is k — general, the entries of q (resp. s) must be k — linearly independent, 
and hence the entries of q (resp. s) must form a k — basis of C(E + D + D') (resp. 
£(2E — (E + D + D'))). Therefore the block z is indeed a 2E — form representing 
E + D + D' and hence k — equivalent to Xd+d 1 - O 

example 1 

For some background on elliptic functions see Whittaker and Watson [?] , Chapter 
XX. 

We hereby introduce a part of the method in the case of a nonsingular projective 
plane cubic, i.e., the well known Weierstrass curve. 

An affine part of this projective curve can be identified with the space C/A via the 
map 

z~(l,p(z),p'(z)) 

described in the background chapter of elliptic functions, which in turn can be 
identified with a complex torus manifold. Since any rational function F G fc(C) 
can be written in the form f(l,x,y) where x — = ^f- we have the map 

f(l,x,y) i— ► g(z) = f(l,p(z),p'(z)) where (l,x,y) G C inducing an isomorphism 
between the rational functions field of the projective curve and the field of mero- 
morphic functions on C/A which is just the field of elliptic functions. 
The Weierstrass curve is the simplest nontrivial case in which the Jacobian variety 
is nonzero group. In this case the Jacobian variety is actually isomorphic to the 
curve itself, i.e, each divisor class in Pic°(C) corresponds to a unique point on the 
curve, namely it can be shown that fixing a point, say b in C then the map 

C -» Pic°(C) 

given by 

t\-+[t-b] 

defines the bijective correspondence. In view of this observation we have that the 
curve itself could be viewed as an additive group. 

By the above notations, we hereby take E = n[0] , G = 2E = 2n[Q], , where n > 2 
and t € C/A. Since degG — 2n, degE — n and g = I we have \degG > 2g and 
degE = jdegG like required. 

Let D be a divisor of degree zero representing a divisor class in Pzc°(C). Without 
loss of generality taking b = [0] we can take D = [t] — [0] where teC, i.e., t G C/A. 
Hence we have E + D= (n — l)[0] + [t],G—(E + D) =E-D= {n + 1)[0] - [*]. We 
now have to find a C — basis of C(E + D). Consider a rational function g G k(C). 

Under the above identification we have that g G C((n ~ 1)[0] + [t]) if and only if 
g G C/A is a meromorphic elliptic function such that an the (not necessarily elliptic) 
function f — g- <j(z — t)cr(z)"~ 1 has no poles i.e., is entire complex function. Hence 
we can identify C(E + D) with the space of entire functions f(z) such that the 
meromorphic function cr ( z _/)^ z )^-i 1S A— periodic. Hence in any given fundamental 
domain f(z) must have exactly n zeros which sum up to —t G C/A thus f(z) is of 
the form f(z) — c ■ a(z — Pi) ■ ■ ■ a(z — P n ) where P\ + ■■■ + P n = —t and c G C. 
Now, the entries of the row vector 

*(*+-) = [a(z - £)» CT (*-l)«p( 2 -l) a(z - ±)»pf(z - ±) ■■■ a(z-±r P (z-±)("- 2 )] 
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arc C linearly independent entire functions admitting these restrictions. Since we 
have by Ricmann-Roch that the space of such entire functions / is an n-dimensional 
space, it follows that these functions form a C-basis the space of the entire func- 
tions /. It follows that the entries of the row vector a ( z 1 t )^) n -i form a C-basis 
for g e C((n — 1)[0] + [t]). In much of the same way we can identify £(E — D) with 
the space of entire functions f(z) such that the mcromorphic function * ^^If+l^ is 
A — periodic. Thus f(z) is of the form f(z) = c ■ a(z — Qi) ■ ■ ■ cr(z — Q n ) where 
Q\ + ■ ■ ■ + Q n = t and c e C, and the entries of the row vector a ^ z form 



g e C((n + 1)[0] - [*]). Now, since C^^ Y ■ 



a C-basis for 

— 1 ~" ~ "\ we have that ^ z ^p^r— ^ is a 2E — form representing D+E. 



We have 



S(z + 1) 
where 



a( Zi + i) 

V * n I 
o(z n+ i + ±] 



?(zi) 




(7(2!)" tr(^l) n p(«l) t7(Zl)V(«l) ' 


• <7(*l) n p(*l)<»- 2 ) 


ct(z„) 




cr(z„)" cr(z„)™ / 9(z n ) cr(z„)V (^n) • 


• a(z„)>(z„)("- 2 ) 



n+1 

II ^ 

i=0 



fc=2 

thus we have that 



(-1) 



fc-2 



1 P ( Zl ) P '{ Zl ) ••• P (^)(«- 2 ) 

1 p(z n ) p'(z n ) ••• p(z„)("- 2 ) 



0!l!---(n)!-a£>)- II " *i) 

i—l 1 < i < j < 



i#fe,m 0<z<j<n+l 
i ^ fc, to 



Put i— > Zi + £ then 



0!l!---(n)!-a(E^ fe , m ^ + ^)-n <z<j<n+l ^ + ^"(^ 

2 ^ fc, TO 
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B= =0!l!---(n)!-<7(i+E^ fe , m ^)-n <i<j<„+l 

i / k,m 

symmetrically done with Zf Zi — ^ 

example 2 

Let us consider the following nonsingular curve of genus g = 3 in P 2 
C : uj\ = lui(uji - lu ))(loi - 2uo)(u>i - 3w ) 
where uj ,ll1i,uj2 are homogeneous coordinates of P 2 . 

Consider the divisor G = UP, where P = (1, 1, 0) £ P 2 then degG = 14 = ig + 2. 
Consider the affine neighborhood A = {uoq ^ 0}. Let x = ^ and y — ^ be the 
affine coordinates of A , then the equation defining the curve C in A is 

C : y 4 = x(x - l)(x - 2)(x - 3) 

and the affine representation of P there is (1, 0). 

In Oc.p we have (x — 1) = y^ ■ x ( x _2)(x-3) ' smce x ( x — — 3) does not vanish 
at P and so is an invertible element in the local ring, thus we have that the (only) 
maximal ideal in Oc,p is mc,p = yOc,p and y is the local parameter there. Another 
way for obtaining this fact is by considering the gradient V = (f'{x), 4y 3 ) where 
/ = x(x — l)(x — 2){x — 3) at (1,0) which is (/'(1),0), since / is separable and 
f{l) = we have that /'(I) 7^ then y is a local parameter in a neighborhood of 
(1,0). 

By the Riemann - Roch theorem we have dimG — degG — # + 1 = 14 — 3 + 1 = 12. 
Thus we have to find 12 basis elements for C(G). 

fi(x,y) = jr^j , then in homogeneous coordinates we have /1 (ivq , uo\ , U02 ) = (^0 , ^1 — 
u)q)- Now f(u>o, oji,u)2) = (1,0) yields that ujo = u\ intersecting with C we have 
that C1J2 = 0. Since the multiplicity of U2 in the defining equation of the curve is 
4 we obtain that f\ has an order 4 pole at P and no other poles on the curve. 
f\{uiQ, u>i, L02) = (0, 1) yields that u>q = thus intersecting with C we have w| = tuf 
then /1 gets four distinct zeros Qi = (0, 1,1), Q2 = (0, 1, i), = (0,1,-1) and 
Qi = (0,l,-t). 

Summing up our results we have 

divfi = Qi + Q 2 + Q3 + Qa - 4P 

thus A e C{G). 

Next we consider the function f 2 (x,y) = -^j, another representation for / 2 in the 
neighborhood of P is f 2 {x,y) — y x ( x -2){x-3) ^ j n ]j 0nl0 g enous coordinates we have 

/ 2 (w ,wi,w 2 ) = {(Ji(u>i-2ujo)(uji-3ujo),u>2)- Now /(wo,Wi,w 2 ) = (1, 0) yields that 
L02 = intersecting with C we get u>i — 0, lj\ — u>q, lji — 2luq and u>i — 3wo thus we 
have four points (1, 0, 0), (1, 1, 0), (1, 2, 0) and (1, 3, 0) respectively. The only point 
which maps to (0, 1) is (1, 1,0) since all other options make the first coordinate of 
the map / 2 vanish. Since the multiplicity of lo 2 in the second coordinate defining 
f 2 is three we have that / 2 has a single pole of order 3 at P. For finding the 
zeros of / 2 let us return to the first representation / 2 (x,y) = -^j, thus we have 
/ 2 (wo, wi,w 2 ) = (uj 2 ,lui - u) ). fi(uj ,LUi,uj 2 ) = (0,1) yields that uj 2 = thus 
intersecting with C we get four distinct points Q[ = (1,0,0),Q 2 = (1,1, 0),Q' 3 = 
(1,2,0) and Q' 4 = (1,3,0). As Q' 2 is not sent to (0,1) we have 3 distinct zeros : 
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Q\ = (1,0,0),Q 3 = (1,2,0) and Q' 4 = (1,3,0). 
Summing up our results we have 

divfi = Q\ + Q' 3 + Q' 4 -3P 

thus / 2 e £(G). 

We now build the remaining functions as follows : 
h{x,y) = {x l 1} 2 thus f 3 = (/i) 2 hence divf 3 = 2 • divfi = 2Qi + 2Q 2 + 2Q 3 + 
2Q A - 8P 

U(x,y) = {x \ )2 thus f 4 = /x-/ 2 hence div/ 4 = divf 1 + divf 2 = Qi + Q 2 + Q 3 + Qi+ 

Q'i + Q 3 + Q'i - 7 p. 

fs(x, y) = thus h = C/2) 2 hence divf 5 = 2 ■ divf 2 = 2Qi + 2Q^ + 2Q' 4 - 6P 

fe(x,y) = {x \ yA thus f 3 = (/1) 3 hence divf 3 = 3 • divfi = 3Qi + 3Q 2 + 3Q 3 + 
3Q 4 - 12P. 

/ 7 (x, y) = (3 ,^ 1)3 thus f 7 = (fi) 2 ■ f 2 hence divfr = 2 ■ divfi + divf 2 = 2Qi + 2Q 2 + 
2Q 3 + 2Q 4 + Q' 1 +Q' 3 + Q' 4 -11P. 

fs{x,y) = r x -i)a tnus fs = /i'(/2) 2 hence divf$ = divfi + 2-divf 2 = Qi + Q 2 + Q 3 + 

Q± + 2Q[ + 2Q' 3 + 2Q' A - 10P. 
h{x> y) = j£f thus f 9 = (/ 2 ) 3 hence divfa = 3 • divf 2 = 3Q[ + 3Q' 3 + 3Q' 4 - 9P 
fw(x, y) = {x v _i)i thus f w = {f^ 2 ■ (f 2 ) 2 hence divf w = 2 ■ divfi + 2 • divfa = 

2Qi + 2Q 2 + 2Q 3 + 2Q 4 + 2Q[ + 2Q' 3 + 2Q' 4 - 14P. 

fu(x,y) = thus fn = fi ■ (f 2 ) 3 hence divfu = divfi + 3 • divf 2 = 

Q1 + Q2 + Qa+ 

Q 4 + 3Q[ + 3Q' 3 + 3Q' 4 - 13P. 

Finally we take fo to be constant function. 
We have 12 functions fk k = 0, 11 where fk € £(G). Since for i ^ j fi and fj 
have distinct number of poles we have that fk k = 0, 11 are linearly independent 
over C and thus form our desired basis for C(G). 

Now we construct a 2P-form ,where degE = 2g + 1 = 7. We take E — 7P thus by 
the above computations we have the basis 

{fo, • • • , fu} 
for 2P = 14P. Consider the 2P-form 



(fx 


h 


h 


u 


fo\ 


h 


hi 


h 


fio 


h 


h 


h 


h 


h 


fx 


h 


fi 


h 


fix 


h 




h 


h 


h 





by (with the current notations) we have 

(E + D) = G + mirij(divvj). 

minj (divvj) = min{Q Y + Q 2 + Q 3 + Qa + Q'i + Q' 3 + Q' i - TP, 3Q[ + 3Q' 3 + 3Q' 4 - 9P 
2Q[ +2Q' 3 +2Q' 4 - 6P, Qi +Q 2 + Qs + Qi+2Q[ +2Q' 3 +2Q' 4 - 10P, Q[ +Q' 3 +Q' 4 -3P} 
- Q'i + Qa + Q4- 10P- 
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So, E + D = Q[ + Q' 3 + Q' 4 - 10P + 2E. 
Hence 

D = Qi + Q' 3 + Q' 4 - 10P + E => D = Q[ + Q' 3 + Q' 4 - 3P 

and degD = 3 — 3 = 0, thus this 2£ , -form represents the divisor D. 

Note that in fact this 2P-form represents the divisor E + D = Q[ + Q 3 +Q' i +AP. 
Let us take gi (x, y) = , then in homogeneous coordinates we have g~i (loq, uj\ , W2) = 
(lui,lui — ujq). Now g(ujQ,LUi,LU2) = (1)0) yields that u>o — toi intersecting with C 
we have that 0J2 = 0. Since the multiplicity of LO2 in the defining equation of the 
curve is 4 we obtain that §\ has an order 4 pole at P and no other poles on the 
curve. gi(wo, wi, 0J2) = (0, 1) yields that uj\ = thus intersecting with C we have 
cj| = then 9~i gets four zero of order 4 at Qi = (1, 0, 0). 
Summing up our results we have 

divgi = 4Q[ - 4P 

thus gi e C{G). 
Now, we define : 

.92 = /2- 

.93 = (ffi) 2 hence divg 3 = 2 • divgi = 8Q[ — 8P. 
.94 = .9i ' 32 hence divg 4 = divgi + divg2 = 5Qi + Q' 3 + Q' 4 — 7 P. 
.95 = (ff2) 2 hence divg 5 = 2 • divg 2 = 2Q[ + 2Q' 3 + 2Q' 4 - 6P 
.96 = (ffi) 3 hence divg§ = 3 • divgi — ^2Q[ — 12P. 

.97 = (,9i) 2 • .92 hence divgi = 2 ■ divgi + divg 2 — 9Q[ + Q 3 + Q 4 — IIP. 
.98 = 9i ■ (ff2) 2 hence divgs — divgi + 2 ■ divg2 — 6Q'i + 2Q 3 + 2Q' 4 — 10P. 
99 = (32) 3 hence divgg = 3 • divg2 = SQ'i + 3Q 3 + 3Q' 4 — 9P 

.9io = (.9i) 2 • (52) 2 hence divg 10 = 2 ■ divgi + 2 • divg 2 = 10Q[ + 2Q' 3 + 2Q' 4 - 14P. 
gn = gi ■ (g2) 3 hence divgu = divgi + 3 • divg2 — 7Q[ + 3Q 3 + 3Q 4 — 13P. finally 
we take go to be constant function. 

For the same considerations as for fk, k = 0, 11, we have that gk, k = 0, 11 
form a basis for C(G). 

Consider the 2P-form 



(91 


9-> 


.91 


94 


9o\ 


9s 


9n 


.97 


910 


.94 


95 


99 


.94 


9s 


.92 


99 


9t 


.98 


9n 


95 


\94 


.98 


.93 


.97 


91) 



By El (with the current notations) we have 

(E + D') = G + minj(divvj). 
minjidivvj) = mm{4Q' 1 -4P,9gi+Q( j +Q^-HP,8Q' 1 -8P,6gi+2g;- ! +2g^-10P, 

5Qi + Q 3 + Q 4 - 7p} = 4g; - hp. 

So, E + D 1 = AQ[ - 11P + 2P. 
Hence 

D' = 4Q[ - IIP + E => D = 4Q[ - 4P 
and degD' = 4 — 4 = 0, thus this 2P-form represents the divisor D'. 
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We now perform the group operation. First note that 

T 



Xd — ud ■ vd ~ 



X D o X D > = (u D ■ V D ) ° (ud 

( 



I /2" 1 ^ 




( hh \ 


h 




' (hf 
(h) 2 


fife 1 




h 




/i(/ 2 ) 2 


\ fo J 




V h J 



vd>) = {ud ° u D >) ■ {vd °v d >) = 

\ T ( h9i{92? \ 
fi9i(92) 3 

hhigi) 2 

h{92?(9i) 2 
A/251 
9i (52) 4 
9i (92) 5 
(/ 2 ) 3 (5i) 2 
(9i) 2 (92) 4 

(h?9l 

9i (92) 3 

ffl(#2) 4 

(/ 2 ) 2 (51) 2 

{gi?{92? 

{f2?9l 



( sr 1 


\ 


/ 9192 \ 
91 {92? 
■ (si) 2 








(i»)V 


1 


92(gi) 2 


\ go 


/ 


V 9i J 



f-l -1 

.12 9l 

1 

9i 1 92 
/if 1 So 

h92 
fig 1 1 92 

h9i\92)- 

fi9o 
hf2 1 9i 1 
h 

AsT 1 

/1S1 1 92 



/1/2 1 5o 
/251" 1 

sf 
9i 1 9l 
9i\92? 

$290 

Zo.gr 1 

fo92 
fo9i 1 92 

fm\g2? 

fa 9o 



Zi5i(ff2) 3 
/i5i(52) 4 
/i(/ 2 ) 2 (Si) 2 
/i(3i) 2 (52) 3 
.fi(/ 2 ) 2 ffi 
9i (92) 2 
9i {92? 

.to) 2 

(.9i) 2 (32) 2 
/2S1 



Note: In the above expressions, whenever there where instances of ji and 52 in 
the same element we have written them both as g 2 for simplicity. 



We will now find the elements in ud Ud> which form a basis for C(D + E + 
D' + E) = C(5Q[ +Q2 + Q3 + TP), and the elements in vd ° vd> which form a ba- 
sis for £(2E—(D+E) + 2E—(D'+E)) = C{2E — D — D') = C(21P-5Q[-Q' 2 -Q' 3 ) 

First notice that /1 = g\ — 1 and A =52- Now, applying these equalities and 
taking 1 for g and fo we rewrite ud°ud> as indicated in figure (a) . It is now very 
easy to see the linear dependence between the elements. We have the following set 
of 12 linear independent elements: 

{1, 5i-l, 9i 1 ,9i 1 92 1 9i 1 {92) 2 ,9i 1 {92f 1 9i 1 92 1 ,9i92 1 -92 1 , 9192-92,. 92,9^ ,{92? }■ 
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All these functions belong to £{D + E + D' + E) = £(5Q[ +Q' 3 + Q' 4 + 7P). As 
deg(D + E + D' + E) = 14 and j = 3we have by Riemann-Roch dim(D + E + D' + 
E) = 14-3 + 1 = 12, thus indeed these functions form a basis for C(D+E+D'+E). 
By multiplying (ud°Ud') by a permutation matrix from its right, we can put these 
basis elements in the bottom 12 entries of the column vector. 
Using the same procedure described above we get the vector in figure (b) 



(ud ou d i) — 



9i 1 92 1 



\ 



9_i 
9i 1 92 
92 1 

9i92 - 92 
92 - 9l X 92 
{92? ~ 9r\92f 



9i 



92 



5i _1 5 2 1 



92 - 9i 1 92 
9i92 1 -92 1 
929i X 
9 2 2 

9i 1 gl 

9i\92? 

92 

9^ 

92 

9x X 92 
9I\92? 
1 



(a) 



(v D OV D i) = 



, 2 2 2. 

9\92 ~ 9i92\ 

1 "\ s 

9i92 ~ 9i92 
9i92 ~ 9i92 

3 2 2 2 

9i92 ~ 9i92 

glg2 - 9192 

9i92 
9i92 

glgl 
2 4 

fflff2 

9i92 

gigl 

gigi 

glgl 

glgl 

gigl 
glgl 
glgt 
glgl 
gigl 



gigl 
4 

9i92 

glgl 
gigl 



22 2 

3i5 2 - 3ifl 2 

gigl 
gigl 

3i32 

2 2 

fllfl2 
9192 



We have the following set of 12 linear independent elements: 

{gi92, gigl, g'i 92, gigl, glgl , g\g2 - glg2 , gi gi , glgl , glgl - glgl, gigl ,glg\, glgl - glgl}- 

All these functions belong to £(2E - {D + E) + 2E -(D' + E)) = £(2E -D-D') = 
£(21P - 5Q; -Q3- Q'4). As deg(2E - D - D') = 14 and g = 3 we have by 
Riemann-Roch dim(2E — D — D 1 ) = 14 — 3 + 1 = 12 thus indeed these functions 
form a basis for £(2E — D — D'). By multiplying o n D /) by a permutation 
matrix we can put these basis elements in the right 12 entries of the row vector. 

By multiplication by elementary matrices (with nonvanishing determinant) we 
can assume that the last 12 bottom entries of (up one) and the last 12 right entries 
of (vd ovd') have respectively the forms 
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' 1 * 

9i 

92 

9\92 

{92? 

9i 1 92 
9i\92) 2 
9i\92? 
9i 1 92 1 

5i.9 2 1 
> 92 1 , 



1 

ui-uo 

LO-2 

(w 1 -w ) 2 

-I 

Ul—UQ 

Ul 
W2 
Ul 

ui(ui-uo) 

ui(ui-w J 2 

CJ1UJ2 
If 1 

"2 



and 



( 9i92\ 
9\9l 
9^92 

gigl 

2 2 

S1S2 
5i32 
9i92 

9h\ 

9x9% 
9i92 
9h\ 
\9i9lj 



/ 10\U)2 \ 
UJ OJ 3 

(wi-wo) 4 
(wi-wo) 4 

4 

2 3 

o>o) 5 
(wi-wo) 6 

2 4 



(ui-wo) 6 

(wi-Wo) 6 



/ 



Multiplying these column and row vectors we get d: 



(9\92 
9l92 


9i9l 


9l92 


2 2 

.91.92 


9i92 


9i9% 


51.92 


ghl 


2 2 

9192 


9X92 


9iQ\ 


9i9l 


4 

5i5 2 


ghl 


92 


9l 


9i92 


9 2 2 


9l 


gigl 


9l 


9 4 2 


gi gl 


9l 


9l 


gigl 


1 


92 


9i 


9\ 


9l92 


9l 


\ 9i 


9i92 


9\ 



9i9\ 


2 2 

9i9i 


g\g2 


ghl 


ghl 


4 2 

5i52 


9i92 


ghl 


ghl 


2 4 

ghl 


ghl 


sisl 


ghl 


2 4 

S1S2 


ghl 


g\ 


gigl 


g\g2 


gl 


gigl 


2 2 

3152 


gl 


gigl 


ghl 


gl 


gigl 


ghl 


gl 


gm 


g\ 


2 2 

ghl 


g\g2 


g\ 


9i9% 


g\g2 


gl 



gigl 

2 4 

ghl 


ghl 
ghl 


3 2 

ghl 
gfgl 


gigl 


2 4 

ghl 


ghl 


ghl 
sist 


ghl 


ghl 


ghl 


ghl 


gi 


gigl 


2 2 

ghl 


gl 


gigl 


ghl 


gl 


gigl 


2 4 

ghl 


gl 


gig! 


ghl 


gl 


gwl 


g\g2 


ghl 


ghl 


g\g2 


gigl 


ghl 


g\g2 



gigl ghl ghl\ 

2 5 3 4 4 3 

3132 3i32 3i32 
gigl ghl 3is! 

ghl ghl ghl 

gigl gigl ghl 
gl gigl ghl 
gl gigl ghl 
gl gigl ghl 
gl gigl ghl 
gl gigl ghl 

ghl ghl gfg! 

3i52 ghl ghl J 



gi 92 = 
2 2 

5i52 = 


W1^2 


3102 
0lff2 


(wi—wo)- 1 

, , 2 , , 2 


("1 -"o) 4 


9192 = 




2 4 

5152 


("i-^o) 6 


6 

S132 = 




2 5 
5i52 


("i-^o) 7 


9i92 = 




5i52 


("i-"o) 7 


3l<?2 = 




5?52 2 


(ui-wq)" 



2 ^1 ^2 3 wi 3 L0-.UJ2 

(-1— O) 3 5152 = (-1— O) 3 5152 = (-1— O) 4 5152 = 0-1 -u, o) 4 

"1"2 „2 3 _ ujgf 3 2 _ ujoj „4 _ "i"2 

(-1— 0) b 5132 _ ("l-"0) b 5lff2 - (-1— o) b 5192 _ ("l—o) b 

M i"2 „3„3 _ _4 2 _ "f"l 5- _ "i"2 

(-1— o) b 5152 - ("i--o) e 5152 - (-1— o) b 5152 _ (-i--o)' i 

"1"2 _ „3 4 _ ujg| 4 3 _ jAJ 5 2 _ u>^| 

( W1 -w ) 7 fflff2 _ (^i-^o) 7 9l9i ~ (^i-^o) 7 3l52 _ (^i-^o) 7 

"1"2 „2 6 _ "?"a „3 5 _ ajuj 4 4 _ w\<*\ 

( U1 - u „)« 5i52 - (W1 _ W0 )8 5i52 - (W1 _ W0 )8 5i52 - (W1 _ W0 )8 

(-1— „)« 5152 = (-i--o) s 
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Now the bottom 12 entries of up, ° Ud> and the right 12 entries of the row vector 
(vd o vd>) form a 12 x 12 block d on the right bottom corner of the 25 x 25 matrix 
Xp, ° XD/(this is just the block d in Proposition [fJJl . The block d is a 4i?-form 
representing the divisor D + D' + 2E. 



We will now build the ^-compression functional p : C(AE) — > k. 
First, by Lemma |H| we have to choose a meromorphic function f^p on C by the 
following rule: 

ord x f iE = ord x AE 
for all points x £ suppE n suppAE = suppE, 

ord x f iE = 
for all points x £ suppE \ suppAE = 0. 

We thus choose the function J^e — (sf 1 ) 7 where g\ — UJ ^l Un ■ As we have 
shown above divgi = AQ[ - AP where Q[ = (1,0,0) and P = (1,1,0). Thus 
divf iE = -7 • (4Qi - AP) = 28P - 2SQ[ and f iE fulfils the required property. 
Now according to Lemma [7| we have to find a meromorphic differential to on C such 
that 

ord x uj + ord x E = 

for all points x G suppE, i.e, 

ordpuj = —ordpE = —7. 

Considering the affine neighborhood A — {w ^ 0} we define u = (f^rfp, i.e, 
u> = gi(x, y) ■ giix., y)dy where x — ^ and y = as we have shown above y is a 
local parameter and ordpu = —7. Now, by Lemma[H]we have 

p(AE)(h) = a(f 4E h) = = R eSp (h ^^ ) = Res P (h ( ,, 2) g%^ii )■ 

As we calculate the residue in an analytic neighborhood of P 6 Ao we can take /i 
to be the affine representation of a function h £ C(AE). 

In our case one can compute the cases where the residue is not zero just by looking 
at the divisors of the functions in the 12 x 12 matrix. We are looking for functions 
with pole divisor equal to 22P. Only such functions will have a simple pole at 
P after applying the ^-compression functional p(AE) (since —22 + 28 — 7 = —1, 
where 28 = ordpf^E and —7 = ordpu). There are exactly two functions which 

4 2 6 

admit this condition, g\g\ = ( J^." 2 o)6 and g x g% = j^^y- where div(gfg%) = 
18Qi + 2Q' 3 + 2Q' i - 22P and div{ gi gl) = 10Qi + 6Q' 3 + 6Q' 4 - 22P. We have 
highlighted these entries of the matrix above. We have found degE = deg7P = 7 
such entries. Since these entries occur at distinct rows and columns, using row and 
column permutation matrices (the matrices P2 and Q2 in Lemma ITT)jl we can bring 
these entries to form a block in the upper left corner of the matrix in which they 
will be placed on the diagonal. Thus using the notation of Lemma ^3 we get the 
matrix 



P{XoX')Q 



• • • 

• a b 

• c d 
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where the block a is of size degE by degE, i.e, 7x7, the block d is of size n by 
n where n = \degG — degE — <7 + l = ^ — 7 — 3 + 1 = 5, where the entries of 
d become zeroes after applying the iS-compression functional p{^E) and the other 
blocks are of the appropriate sizes. 

Notice, the block d here is not the block considered previously in the construction. 
Looking at the entries of the row and column vectors used to create the last matrix 
we see that row and column vector creating the block d are the column vector 
entries 

{9192, 3i52. 9x92, gxgl, g\g\} 

and the row vector entries 

{!. gx 1 , 9i X 92, 9i 1 g2 1 , 92 1 }- 
Each of these sets contains linearly independent elements as observed above. The 
first set forms a basis for £{(2E+D+D')-E) = C{E+(D+D')) = £(5Qi+Q^+Q^) 
and the second set forms a basis for £(4E - (2E + D + D') - E) = C(2E - (E + 
(D + £>'))). 

Thus using the notation of Lemma EI] the block z is a 2i?-form representing E + 
(D + D'), i.e, by agreement (see Candidate for the Abel map section) z = Xb+d 1 
represents (D + D') as desired. 

This is the place to note that, looking at the elements of the row (resp. column) 
vector used to create the last matrix, there are exactly two options for an element's 
column (resp. row) in the matrix to behave under p. The first is that all the 
column's (resp. row's) entries vanish and then it is guaranteed that the element 
belongs to £(4E - (2E + D + D')-E) (resp. C((2E + D + £)')- E)), the second is 
that there is an entry that does not vanish under p in which case it is guaranteed 
that the element belongs to C ^ E _ ^ 2 E E + ±gj^ ] J E (resp. £(( £ 2 ( j^+^+^ £) ). Thus, as 
our non vanishing entries appearing in distinct rows and columns of the matrix, 
they point out exactly the separation of interest both in the row and the column 
vector. 
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Summary and conclusions 
Summing up our results we can point out a number of issues. 

• First and most important, the algorithm works. Example number 2 performs 
the algorithm on a genus 3 curve which is even not hypcrelliptic. As far as we 
know, explicit algorithms for this case are still poorly studied. 



• For cryptographic implementations there is much interest in further generalizing 
this algorithm to work on finite fields. Analyzing the algorithm for future general- 
ization, we consider two distinct cases: the field k is infinite and not algebraically 
closed, the field k is finite. We have spotted two issues that must be taken in 
consideration. The first involves the explicit representation of the Jacobian by a 
variety of Jacobi matrices. The Abel map (the map providing the representation) 
properties are strongly based on the fact that the k — algebra A® 1 (where J is a 
finite set contained in the set of integers) is a domain. This result is true if k is 
an algebraically closed field, otherwise this claim is generally not true. The sec- 
ond issue involves the implementation of the group operation (performed on the 
G- forms) . More specifically, the problem is the existence of a particular function fa 
[?] which gives rise to the compression functional. Under the relevant assumptions, 
the existence of such a function is guaranteed only over infinite fields. 

We conclude that in the case where k is an infinite field (not algebraically closed) , 
the explicit representation obtained in this work does not apply directly but the 
group law still works (on G- forms). In the case where k is a finite field, both issues 
are to be investigated. 
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